mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 10:11:27 +01:00
kfraser@localhost.localdomain
33ac7e69c8
and described in the user guide to demonstrate how to quickly create, enforce, and test workload protection policies in Xen. The tool is aimed to improve usability of sHype/ACM for Xen.It is included in a single file to make it easy to try it out on different platforms (it inherits the look and feel of the base platform). It is tested on Linux and Windows. Please read the new user guide section about how to start and use the tool (section 10.2). Requirements: python (www.python.org), wxPython (www.wxpython.org or try 'yum install wxPython'). Signed-off by: Reiner Sailer <sailer@us.ibm.com>
114 lines
3.4 KiB
Makefile
114 lines
3.4 KiB
Makefile
XEN_ROOT = ../..
|
|
include $(XEN_ROOT)/tools/Rules.mk
|
|
|
|
CFLAGS += -Werror
|
|
CFLAGS += -fno-strict-aliasing
|
|
CFLAGS += -I. -I $(XEN_LIBXC)
|
|
|
|
CPPFLAGS += -MMD -MF .$*.d
|
|
PROG_DEPS = .*.d
|
|
|
|
XML2VERSION = $(shell xml2-config --version )
|
|
CFLAGS += $(shell xml2-config --cflags )
|
|
CFLAGS += $(shell if [[ $(XML2VERSION) < 2.6.20 ]]; then echo ""; else echo "-DVALIDATE_SCHEMA"; fi )
|
|
LDFLAGS += $(shell xml2-config --libs ) # if this does not work, try -L/usr/lib -lxml2 -lz -lpthread -lm
|
|
|
|
ifeq ($(ACM_DEFAULT_SECURITY_POLICY),ACM_NULL_POLICY)
|
|
POLICY=null
|
|
endif
|
|
ifeq ($(ACM_DEFAULT_SECURITY_POLICY),ACM_CHINESE_WALL_POLICY)
|
|
POLICY=chwall
|
|
endif
|
|
ifeq ($(ACM_DEFAULT_SECURITY_POLICY),ACM_SIMPLE_TYPE_ENFORCEMENT_POLICY)
|
|
POLICY=ste
|
|
endif
|
|
ifeq ($(ACM_DEFAULT_SECURITY_POLICY),ACM_CHINESE_WALL_AND_SIMPLE_TYPE_ENFORCEMENT_POLICY)
|
|
POLICY=chwall_ste
|
|
endif
|
|
|
|
SRCS_TOOL = secpol_tool.c
|
|
OBJS_TOOL := $(patsubst %.c,%.o,$(filter %.c,$(SRCS_TOOL)))
|
|
SRCS_XML2BIN = secpol_xml2bin.c secpol_xml2bin.h
|
|
OBJS_XML2BIN := $(patsubst %.c,%.o,$(filter %.c,$(SRCS_XML2BIN)))
|
|
|
|
ACM_INST_TOOLS = xensec_tool xensec_xml2bin xensec_gen
|
|
ACM_EZPOLICY = xensec_ezpolicy
|
|
ACM_OBJS = $(OBJS_TOOL) $(OBJS_XML2BIN) $(OBJS_GETD)
|
|
ACM_SCRIPTS = python/xensec_tools/acm_getlabel
|
|
|
|
ACM_CONFIG_DIR = /etc/xen/acm-security
|
|
ACM_POLICY_DIR = $(ACM_CONFIG_DIR)/policies
|
|
ACM_SCRIPT_DIR = $(ACM_CONFIG_DIR)/scripts
|
|
|
|
ACM_INST_HTML = python/xensec_gen/index.html
|
|
ACM_INST_CGI = python/xensec_gen/cgi-bin/policy.cgi
|
|
ACM_SECGEN_HTMLDIR= /var/lib/xensec_gen
|
|
ACM_SECGEN_CGIDIR = $(ACM_SECGEN_HTMLDIR)/cgi-bin
|
|
|
|
ACM_SCHEMA = security_policy.xsd
|
|
ACM_EXAMPLES = chwall ste chwall_ste
|
|
ACM_POLICY_SUFFIX = security_policy.xml
|
|
|
|
ifeq ($(ACM_SECURITY),y)
|
|
.PHONY: all
|
|
all: build
|
|
|
|
.PHONY: install
|
|
install: all $(ACM_CONFIG_FILE)
|
|
$(INSTALL_DIR) -p $(DESTDIR)/usr/sbin
|
|
$(INSTALL_PROG) -p $(ACM_INST_TOOLS) $(DESTDIR)/usr/sbin
|
|
$(INSTALL_PROG) -p $(ACM_EZPOLICY) $(DESTDIR)/usr/sbin
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_CONFIG_DIR)
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_POLICY_DIR)
|
|
$(INSTALL_DATA) -p policies/$(ACM_SCHEMA) $(DESTDIR)$(ACM_POLICY_DIR)
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_POLICY_DIR)/example
|
|
for i in $(ACM_EXAMPLES); do \
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_POLICY_DIR)/example/$$i; \
|
|
$(INSTALL_DATA) -p policies/example/$$i/client_v1-$(ACM_POLICY_SUFFIX) $(DESTDIR)$(ACM_POLICY_DIR)/example/$$i; \
|
|
done
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_SCRIPT_DIR)
|
|
$(INSTALL_PROG) -p $(ACM_SCRIPTS) $(DESTDIR)$(ACM_SCRIPT_DIR)
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_SECGEN_HTMLDIR)
|
|
$(INSTALL_DATA) -p $(ACM_INST_HTML) $(DESTDIR)$(ACM_SECGEN_HTMLDIR)
|
|
$(INSTALL_DIR) -p $(DESTDIR)$(ACM_SECGEN_CGIDIR)
|
|
$(INSTALL_PROG) -p $(ACM_INST_CGI) $(DESTDIR)$(ACM_SECGEN_CGIDIR)
|
|
ifndef XEN_PYTHON_NATIVE_INSTALL
|
|
python python/setup.py install --home="$(DESTDIR)/usr"
|
|
else
|
|
python python/setup.py install --root="$(DESTDIR)"
|
|
endif
|
|
else
|
|
.PHONY: all
|
|
all:
|
|
|
|
.PHONY: install
|
|
install:
|
|
endif
|
|
|
|
.PHONY: build
|
|
build: mk-symlinks $(ACM_INST_TOOLS) $(ACM_NOINST_TOOLS)
|
|
python python/setup.py build
|
|
chmod 700 $(ACM_SCRIPTS)
|
|
|
|
xensec_tool: $(OBJS_TOOL)
|
|
$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $^ -L$(XEN_LIBXC) -lxenctrl
|
|
|
|
xensec_xml2bin: $(OBJS_XML2BIN)
|
|
$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $^
|
|
|
|
xensec_gen: xensec_gen.py
|
|
cp -f $^ $@
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
$(RM) $(ACM_INST_TOOLS) $(ACM_NOINST_TOOLS)
|
|
$(RM) $(ACM_OBJS)
|
|
$(RM) $(PROG_DEPS)
|
|
$(RM) -r xen
|
|
$(RM) -r build
|
|
|
|
.PHONY: mrproper
|
|
mrproper: clean
|
|
|
|
-include $(PROG_DEPS)
|